Microcontroller ECC Error Handling via Instruction Skipping

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional microcontrollers used in vehicles are unable to continue operation and read data correctly when an ECC error occurs, especially due to power-off events during data writing or erasure, leading to incomplete data areas and potential system resets.

Innovation Solution

A microcontroller with an ECC error detection mechanism that executes an interrupt process to skip the faulty instruction, store an abnormality value, and resume operation from the next instruction, allowing continued data reading from unaffected locations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the microcontroller performs a reset operation in response to a power-off event during data writing or erasure, then data integrity is protected, but the microcontroller cannot continue operation

Engineering Contradiction:
Improvedata integrityVSAvoidoperation continuity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary detection of ECC errors during the main process before executing the problematic instruction. When an ECC error is detected, the system prepares by identifying the faulty instruction and setting up the interrupt handler in advance, so that when the error occurs, the system can immediately skip the problematic instruction and continue operation without full reset

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The interrupt handler identifies the specific instruction that caused the ECC error and modifies the program counter to skip that instruction and execute the next instruction instead. This allows the system to rush through the problematic area and continue operation, maintaining productivity while preserving data integrity through selective instruction skipping

Inventive Principle:
Principle #21Skipping (Rushing through)

2Stability of the object's composition

If the microcontroller executes a reset in response to ECC error occurrence, then system stability is maintained, but the microcontroller cannot continue data processing

Engineering Contradiction:
Improvesystem stabilityVSAvoiddata processing continuity
Core Design Contradiction:
Stability of the object's compositionVSProductivity

Solution Approach 1:

When an ECC error is detected, the interrupt handler calculates the address of the faulty instruction and modifies the program counter to skip that instruction and subsequent instructions that may be affected. This allows the system to maintain stability by avoiding execution of corrupted instructions while continuing data processing from a safe point

Inventive Principle:
Principle #21Skipping (Rushing through)

Solution Approach 2:

The interrupt handler acts as an intermediary between the ECC error detection and the main processing loop. It receives the error signal, performs intermediate processing to identify and skip the faulty instruction, and then returns control to the main process, allowing continuous operation with maintained stability

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If the microcontroller uses conventional error handling with reset operations, then critical hardware errors are detected, but the system cannot be used as a vehicle ECU requiring continuous operation

Engineering Contradiction:
Improveerror detection capabilityVSAvoidapplicability as vehicle ECU
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system detects ECC errors to identify critical hardware failures, but instead of resetting, it skips the faulty instruction and continues operation. This maintains error detection capability while enabling continuous operation, making the microcontroller suitable for vehicle ECU applications where uninterrupted operation is essential

Inventive Principle:
Principle #21Skipping (Rushing through)

Solution Approach 2:

The error handling approach transitions from a static reset operation to a dynamic response that adapts based on the specific error condition. The system dynamically determines whether to skip instructions or continue normal operation based on ECC error detection results, providing the flexibility needed for vehicle ECU applications

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS9778981B2Microcontroller
Publication Date: 2017.10.03 DENSO CORP
  • US9778981B2 patent drawing
  • US9778981B2 patent drawing
  • US9778981B2 patent drawing

AI summary

A microcontroller includes a nonvolatile memory. The microcontroller executes an ECC error detection to detect an ECC error during a main process, which accesses the nonvolatile memory, and an interrupt process when the ECC error occurs. The interrupt process executes a change process that specifies an instruction causing the ECC error, which is detected by the ECC error detection, and changes a program counter to skip the specified instruction and to execute a next instruction. The microcontroller executes an abnormality value storage process that stores an abnormality value in a storage destination of a read value, and the read value is read in the main process after the change process.